[Insert organisation name] Privacy Policy

Our contact details

Name: [INSERT NAME]
Address: [INSERT ADDRESS]
Phone Number: [INSERT PHONE NUMBER]
E-mail: [INSERT EMAIL ADDRESS]
[INSERT DATE OF COMPLETION]
The type of personal information we collect
We currently collect and process the following information:

• Personal identifiers, contacts and characteristics (for example, name and contact details)
• [INSERT ADDITIONS TO LIST AS APPROPRIATE]
How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the
following reasons:

• [INSERT REASONS PERSONAL INFORMATION WAS COLLECTED]

[If applicable] We also receive personal information indirectly, from the following sources in
the following scenarios:

• [INSERT THE SOURCE OF WHERE DATA WAS INDIRECTLY COLLECTED AND WHY, IF
APPLICABLE]
We use the information that you have given us in order to [INSERT LIST OF HOW THE
PERSONAL INFORMATION IS USED].
We may share this information with [INSERT NAME OF OTHER ORGANISATIONS OR
INDIVIDUALS IF APPLICABLE].
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for
processing this information are: [delete as appropriate]
(a) Your consent. You are able to remove your consent at any time. You can do this by
contacting [INSERT CONTACT DETAILS OF YOUR DATA PROTECTION OFFICER]

(b) We have a contractual obligation.

(c) We have a legal obligation.

(d) We have a vital interest.

(e) We need it to perform a public task.

(f) We have a legitimate interest.

How we store your personal information

Your information is securely stored [INSERT LOCATION].

We keep [INSERT TYPE OF PERSON INFORMATION KEPT] for [INSERT RETENTION PERIOD].
We will then dispose your information by [INSERT HOW DATA WILL BE DISPOSED].
Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you
think is inaccurate. You also have the right to ask us to complete information you think is
incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in
certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the
processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of
your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal
information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we
have one month to respond to you.
Please contact us at [INSERT CONTACT DETAILS AGAIN (EMAIL, PHONE NUMBER OR POSTAL
ADDRESS DEPENDING ON YOUR PREFERENCE] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a
complaint to us at [INSERT YOUR DATA PROTECTION OFFICERS CONTACT DETAILS].
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk